Description
Couchbase Server 6.5.x and 6.6.x through 6.6.2 has Incorrect Access Control. Externally managed users are not prevented from using an empty password, per RFC4513.
Unscored
CVE-2021-35943
EUVD-2021-22578GHSA-cm7f-fcwh-gc62
Couchbase Server 6.5.x and 6.6.x through 6.6.2 has Incorrect Access Control. Externally managed users are not prevented from using an empty…
Published Sep 29, 2021 · Updated Aug 4, 2024 · Assigned by mitre